Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File:                     3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier:          dA1hxr5C0P+eyu3HXCmHDxDwtEaZ2XvLerz6hNp6hKM=
Subject key identifier:   50:5B:27:E6:95:79:F3:84:52:3E:0D:09:0F:ED:5F:53:F6:66:F9:3D
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer:       /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial:       018F429F28F84DEF478574B89630CB4568A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number:          116D
Signing time:             Sat 04 May 2024 08:01:17 +0000
Manifest this update:     Sat 04 May 2024 08:01:17 +0000
Manifest next update:     Sun 05 May 2024 08:01:17 +0000
Files and hashes:         1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: yZxH8aN88+g5gE1SFBhPm8y2P1hC882i8TGM1YGf3TM=)
                          2: FpLQ4l-HKlL_5nxYrIcvT5sA46M.roa (hash: Vw/Zph7TDNY6Kf9IGGV1Riws1ujHDvKTPwZPOYMHmRc=)
                          3: VnxZp18lTx-zfggj9PB6wfxzpiE.roa (hash: T+14gpSkmj8LQ+6+29C9T4UTIQcTFyhm08dPRS1Y1RY=)
                          4: kvnIubCQNiDNe1vQv4GrVcdobIw.roa (hash: PmZsNi4fZpWk04qNITu2VqtzLGnmMJavad8yLbIcbGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:28:f8:4d:ef:47:85:74:b8:96:30:cb:45:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
        Validity
            Not Before: May  4 08:01:17 2024 GMT
            Not After : May  5 08:01:17 2024 GMT
        Subject: CN=505b27e69579f384523e0d090fed5f53f666f93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:29:b4:45:80:6b:02:57:8e:fd:22:c8:9e:
                    c1:86:3b:b9:1e:5e:4a:97:db:ed:21:61:74:81:be:
                    b6:cb:64:13:04:6c:0c:13:c7:63:ad:49:93:a0:55:
                    b7:df:b2:98:8f:d3:88:6f:af:d9:19:d1:06:d6:c7:
                    15:9d:77:9c:50:7a:22:6c:34:2b:19:40:22:e2:d2:
                    12:0a:1d:f2:99:3f:fc:f8:2e:2b:e9:23:76:0a:60:
                    38:dd:aa:7e:5e:8f:9e:bf:54:13:00:67:d5:e2:fd:
                    27:b1:00:77:64:32:72:07:a6:7b:ba:c6:be:66:83:
                    69:10:ca:ab:4b:66:7a:d8:7c:9b:42:42:0a:6c:3e:
                    a1:a3:64:58:7c:b6:05:be:b2:ce:ee:d5:12:4e:17:
                    47:9b:f0:fd:d7:fa:34:62:9d:ce:03:2b:2e:e8:3c:
                    a5:57:43:13:de:50:bd:a0:6a:9b:b1:79:31:ad:d2:
                    bc:08:86:d9:a6:63:55:a9:6a:46:96:a0:7a:b6:05:
                    88:d5:30:8b:29:ac:8d:08:73:24:27:48:d1:69:6a:
                    7d:20:90:33:6d:a9:fc:25:7a:b3:50:25:4c:2a:ad:
                    7e:4f:47:33:8d:82:a5:2a:b7:f2:62:8f:60:81:bb:
                    84:ee:ae:54:e9:e7:35:3b:38:15:62:a2:42:37:02:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5B:27:E6:95:79:F3:84:52:3E:0D:09:0F:ED:5F:53:F6:66:F9:3D
            X509v3 Authority Key Identifier:
                keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:2f:83:9e:cf:d8:cf:7f:ab:28:62:0c:63:92:74:d6:da:
         7d:27:c9:0c:8c:96:2b:4f:14:ab:05:59:30:b0:99:e3:a9:dd:
         09:7a:70:b1:4f:1a:7c:ec:9f:db:20:cf:11:68:2a:df:24:08:
         5c:d7:4d:bf:30:b5:d8:a6:6e:92:61:6e:a2:78:94:04:d0:aa:
         26:6b:26:24:63:eb:95:24:fc:df:17:9b:ed:07:38:a0:28:62:
         64:dc:3c:a6:b2:29:54:35:42:60:65:bb:4f:38:45:54:2a:49:
         1f:17:9d:d0:c4:0b:06:9c:7a:fa:6f:1e:5f:f5:8e:f7:b4:96:
         8b:20:3c:c1:2c:00:69:e9:a3:72:fd:94:a7:29:6f:5e:ed:c1:
         6d:fd:41:75:02:bf:be:34:99:8d:43:e5:b8:07:b6:f0:6e:e4:
         d3:86:a1:2c:06:79:72:a9:1d:8d:f4:91:85:2d:20:8f:e4:23:
         c9:e4:6d:53:d9:97:42:44:a1:5e:99:0f:e3:4c:7c:82:02:59:
         40:d0:28:7f:53:d3:4f:d6:7f:d3:67:a0:49:7c:7f:df:fa:d3:
         65:4d:49:0f:a2:74:80:0a:7b:ad:c6:1d:19:62:a1:d9:09:63:
         eb:a4:00:c5:98:af:91:6c:7f:b6:92:e7:56:21:63:55:a1:b2:
         16:9a:71:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:18:49 2024 by rpki-client on console-ams.rpki-client.org